Issue #14609 has been updated by Chris Price.
I believe I have a fix for this here: https://github.com/cprice-puppet/puppet/commit/0cea47ec90e77e81c27ffbedbd46bb5357a45d66 Would like to test it a bit before submitting a pull request. Will check in with Haus for help on how best to do that. Meanwhile, Erik, the change only affects one file so if you have any interest in trying it out in your environment it should be pretty easy to patch it in by hand. Thanks a ton for reporting this issue! Very good for us to be catching this now, before the official release. ---------------------------------------- Bug #14609: Wrong ssldir used when using 3.0rc1 packages under passenger https://projects.puppetlabs.com/issues/14609#change-63512 Author: Erik Dalén Status: Accepted Priority: High Assignee: Chris Price Category: Target version: 3.0.0 Affected Puppet version: Keywords: Branch: I tried upgrading one of my puppetmasters from 2.7.13 to 3.0.0rc1 using the packages from apt.puppetlabs.com. The server is using debian squeeze. Here is relevant parts of the puppet.conf: [main] logdir=/var/log/puppet vardir=/var/lib/puppet ssldir=/var/lib/puppet/ssl rundir=/var/run/puppet factpath=$vardir/lib/facter templatedir=$confdir/templates postrun_command=/etc/puppet/postrun pluginsync=true [master] # These are needed when the puppetmaster is run by passenger # and can safely be removed if webrick is used. ssl_client_header = SSL_CLIENT_S_DN ssl_client_verify_header = SSL_CLIENT_VERIFY ssldir= $vardir/ssl-master { owner = service, group = root, mode = 771 } puppet master --configprint ssldir prints: /var/lib/puppet/ssl-master When I run it under webrick everything works. But under passenger (with the config that worked with 2.7.13) I get the following backtrace: Ruby (Rack) application could not be started The application has exited during startup (i.e. during the evaluation of config/environment.rb). The error message may have been written to the web server's log file. Please check the web server's log file (i.e. not the (Rails) application's log file) to find out why the application exited. If that doesn't help, then please use the backtrace below to debug the problem. Application root: /usr/share/puppet/rack/puppetmasterd Backtrace: # File Line Location 0 /usr/lib/ruby/1.8/puppet/util.rb 543 in `exit' 1 /usr/lib/ruby/1.8/puppet/util.rb 543 in `exit_on_fail' 2 /usr/lib/ruby/1.8/puppet/application.rb 340 in `run' 3 config.ru 16 4 /usr/lib/ruby/1.8/rack/builder.rb 46 in `instance_eval' 5 /usr/lib/ruby/1.8/rack/builder.rb 46 in `initialize' 6 config.ru 1 in `new' 7 config.ru 1 And this in /var/log/daemon.log: 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: Wrapped exception: 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl]/ensure) change from absent to directory failed: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/private_keys]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/private_keys]) Skipping because of failed dependencies 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/public_keys]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/public_keys]) Skipping because of failed dependencies 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/certs]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/certs]) Skipping because of failed dependencies 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/private]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/private]) Skipping because of failed dependencies 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/certificate_requests]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: (/File[/etc/puppet/ssl/certificate_requests]) Skipping because of failed dependencies 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: Could not prepare for execution: Got 3 failure(s) while initializing: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl; Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: Wrapped exception: 2012-05-21T16:54:05.000+00:00 majlis.int.sto.spotify.net puppet-master[22870]: Permission denied - /etc/puppet/ssl; change from absent to directory failed: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: Wrapped exception: 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl]/ensure) change from absent to directory failed: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/private_keys]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/private_keys]) Skipping because of failed dependencies 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/public_keys]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/public_keys]) Skipping because of failed dependencies 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/certs]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/certs]) Skipping because of failed dependencies 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/private]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/private]) Skipping because of failed dependencies 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/certificate_requests]) Dependency File[/etc/puppet/ssl] has failures: true 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: (/File[/etc/puppet/ssl/certificate_requests]) Skipping because of failed dependencies 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: Could not prepare for execution: Got 3 failure(s) while initializing: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl; Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: Wrapped exception: 2012-05-21T16:54:06.000+00:00 majlis.int.sto.spotify.net puppet-master[22890]: Permission denied - /etc/puppet/ssl; change from absent to directory failed: Could not set 'directory' on ensure: Permission denied - /etc/puppet/ssl -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
